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<57)Abstract: 

PROBLEM TO BE SOLVED: To provide a file update decision function for 
replacing a control microprogram during the continuation of on-line 
operation and preventing fault occurrence due to the update of the control 
microprogram and a function which speedily puts the microprogram back to 
its old version in case of fault occurrence. 

SOLUTION: While processors 21 to 23 operate continuously, a processor 20 
is shut down and a control microprogram stored in a new program area 31 
of an auxiliary storage device 30 is loaded into the processor 20, which is 
restored. Similar processes are repeated for the processors 21 to 25 and 
the programs on all the processors can be updated while the on-line 
operation is carried on. When a new microprogram is installed from a floppy 
disk drive 33, the versions of the control microprograms running on the 
processors 20 to 25 are decided and their program consistency is checked. 
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(54) PROGRAM FILE UPDATING DEVICE 

(57) Abstract: 

PROBLEM TO BE SOLVED: To provide a file update 
decision function for replacing a control 
microprogram during the continuation of on-line 
operation and preventing fault occurrence due to 
the update of the control microprogram and a 
function which speedily puts the microprogram back 
to its old version in case of fault occurrence. 
SOLUTION: While processors 21 to 23 operate 
continuously, a processor 20 is shut down and a 
control microprogram stored in a new program area 
31 of an auxiliary storage device 30 is loaded 
into the processor 20, which is restored. Similar 
processes are repeated for the processors 21 to 25 
and the programs on all the processors can be 
updated while the on-line operation is carried on. 
When a new microprogram is installed from a floppy 
disk drive 33, the versions of the control 
microprograms running on the processors 20 to 25 
are decided and their program consistency is checked. 
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* NOTICES * 

JPO and NGIPI are not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2 **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] It consists of one or more channel ports which communicate with a processor, an 
auxiliary storage unit, and the host CPU. In the magnetic-storage control system which performs 
signal transfer processing with an external magnetic disk drive while a processor controls said 
channel port and performs communications processing with the host CPU according to the 
program loaded from the auxiliary storage unit Blockade one processor in two or more 
processors which have the same pass, and the remaining processor is worked. By updating the 
program file of said blockaded processor and updating the program file of other processors in 
order further Renewal equipment of a program file characterized by all processors being updated 
by the new program file with the existing configuration resource, without interrupting processing 
with said host CPU and said external magnetic disk drive. 

[Claim 2] Renewal equipment of a program file characterized by to restore the program before 
updating to said one updated processor during an updating activity until renewal of the program 
file to all the processors in two or more processors which have the same pass is completed in 
claim 1, without interrupting the processing from said host CPU and said external magnetic disk 
drive when a failure occurs by operation of the updating program to one processor. 
[Claim 3] Renewal equipment of a program file characterized by judging the compatibility of 
said file, and the adjustment of the program in a file on the occasion of renewal of a program file 
in claims 1 or 2 between the file under operation, and the file to update. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Industrial Application] This invention has the function to perform maintenance and 
management of the program to the control unit which consists of two or more processors and 
memory which operate by the program, and relates to the renewal equipment of a program file in 
the information processor in which renewal of a program file is possible. 
[0002] 

[Description of the Prior Art] Conventionally, it changed to the memory area which stopped and 
carried out the new program load of the memory area which stores a program while performing 
information communications processing by the specific breakpoint inside, without cutting the 
communications processing from the outside as shown in JP,6-95988,A, and processing has been 



resumed by the new program. 

[0003] A new program can be updated without making it stop by the specific breakpoint by 
updating the program of the processor which was made to blockade one of two or more 
processors which are working, and was blockaded in other processors while performing the I/O 
process with the exterior according to this invention. 
[0004] 

[Problem(s) to be Solved by the Invention] By the conventional method, in order to update a 
control program while continuing processing with the host CPU, when a failure occurred during 
renewal of a control program, processing had to be suspended by the specific breakpoint, 
required taking over information had to be transmitted to specific area from the memory area 
which loads the old file, and the file had to be updated. Therefore, when a failure occurs during 
file updating, processing with the exterior cannot be continued. Moreover, the memory resource 
for storing the file to update is also needed for an excess. 

[0005] According to this invention, since renewal of a program is performed in at least one 
processor while performing processing with the host CPU and an external magnetic disk drive, 
when a failure occurs during renewal of a program, it is possible to return to the program before 
updating, returning to the condition before the update process which was being performed when 
the failure occurred, and continuing processing with the exterior by other processors. 
[0006] Furthermore, in order to prevent the program malfunction which is not expected after 
renewal of a program, since it updates by judging the compatibility by the label comparison with 
the version of a micro program which is working, and the version of the new micro program 
which it is going to update, it is possible to prevent the malfunction by renewal of a new program 
file. 
[0007] 

[Means for Solving the Problem] The following methods were adopted in order to attain said 
purpose. 

[0008] As a thing corresponding to claim 1 of a claim, in case renewal of a program file is 
performed, the processor which blockaded only one processor in two or more processors which 
have the same pass, and was blockaded after loading the program on each common memory 
which should be updated to said one processor is rebooted, and it operates by the new program. 
This processing is repeated only several processor minutes and all processors are updated to a 
new program. 

[0009] When a program file is updated as a thing corresponding to claim 2 of a claim, During an 
updating activity until it records the program update process and the renewal of a program file to 
all processors is completed When it originated in actuation by the updating program to one 
processor and a failure occurs, The return processing to the original program is prepared for 
every update process currently recorded since there is a possibility that the malftmction of a 
program may be included in a control unit when an update process is then performed, and the old 
program of the origin stored in another field is reloaded to a processor. 
[0010] As a thing corresponding to claim 3 of a claim, in case a program file is updated, the 
updating hysteresis of a program is recorded as bit map data, compatibility with the file and 
program which are newly going to update, and adjustment are judged, and only the version to 
update and the suiting program are updated. 
[0011] 

[Function] In case the program file included in equipment is updated according to this invention, 
one processor is blockaded among two or more processors which have the same pass, the 



program updated from a common memory area is loaded, and a program is updated by rebooting. 

Only the processor under renewal of a program is blockaded, and since other processors can 

perform processing by the old program, they can perform renewal of a program file, without 

stopping processing activation with the host CPU and an external magnetic disk drive, 

[0012] In this invention, since the information on a program update process is recorded, when it 

originates in actuation by the updating program to one processor and a failure occurs during an 

updating activity until the renewal of a program file to all processors is completed, return 

processing currently prepared by the contents of the update process which was being performed 

when a failure occurred is performed. Therefore, processor processing can be restored to the old 

program before updating by no stopping, without stopping all processors. 

[001 3] Since according to this invention it updates only when the conditions of the updating 

propriety of an old and new program are judged and it suits updating conditions, the program 

malfunction after updating can be prevented. 

[0014] 

[Example] Fig. 1 shows the configuration of the magnetic-storage control system (it calls 
Following DKC) which is one example of this invention. DKC builds in the channel-control 
microprocessors 20-23 and the magnetic-disk control microprocessors 24 and 25, and mounts the 
service processor 10 (it calls Following SVP) common to each control microprocessor. 
[0015] The control micro program of DKC can be stored in the new program storage area 31 in 
HDD30, and can be accessed from SVP 10 through the SVP-HD interface 34. SVP10 can 
perform loading of a control micro program to a control microprocessor through the SVP- 
interprocessor connection interface 46. 

[0016] SVP 10 reads the control micro program stored in the floppy disk from a floppy disk drive 
33, and the renewal of a control micro program writes it in the new program storage area 31 in 
HDD30. At this time, the file updating (FC) hysteresis currently recorded in the version and bit 
map format of a micro program is compared, and updating propriety is judged. That is, the label 
peculiar to it is attached, with this label, it turns out whether file updating is possible, and further, 
the hysteresis of the bit map format created for every program in a file is seen to pro 
GURAMUBA-John, and he understands the quality during a program. If it judges with updating 
being possible, the operation micro program before updating said to the new program storage 
area 3 1 until now will be moved to the old program storage area 32. 

[0017] SVP 10 directs processor lock out to a processor 1, and a processor 1 blockades the 
processor-channel connection interface 40, and it performs loading of a control micro program 
from the new program storage area 31. If loading of a control micro program is completed, 
SVP 10 directs processor recovery to a processor 1, and a processor 1 will recover the processor- 
channel connection interface 40, and will resume processing with a new control micro program. 
Under the present circumstances, other processors are performing processing by the old program. 
Thus, when it originates in actuation by the updating program to one processor and a failure 
occurs during an updating activity until the renewal of a program file to all processors is 
completed, since there is a possibility that the malfunction of a program may be included in a 
control unit when an update process is performed as it is, the return processing to the original 
program is prepared for every update process, and the old program of the origin stored to another 
field 32 is reloaded to one processor. 

[0018] When the same processing is repeated only several microprocessor minutes, the processor 
magnetic-disk connection interface 45 of a processor n25 is recovered and processing is resumed 
with a new control micro program, all the microprocessors of DKC are updated by the new 
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control micro program. 

[0019] When the failure which is not expected with a new control micro program after updating 
while DKC works occurs, SVP10 detects through the SVP-interprocessor connection interface 
46. 

[0020] SVP10 moves the control micro program before updating stored in the old program 
storage area 32 to a new program field, when it distinguishes whether it is that to which a failure 
originates in a new micro program and a new control micro program causes a failure. SVP10 
repeats the same processing as the time of updating to a processor, and returns it to the control 
micro program before updating. 

[0021] Fig. 2 is drawing showing the detail of a version and a bit map judging. The label of the 
version of a micro program which is working before performing renewal of a micro program, 
and the new micro program version which it is going to update is compared, and when 
incompatible to the program to which a new micro program is working, the bit map data showing 
the renewal hysteresis of a program file till then currently recorded on the processor are cleared 
in a completely new bit map. 

[0022] TTie premise bit map (existence-or-nonexistence map of the program which will be the 
requisite for operating a certain program) and the renewal hysteresis bit map of a program file 
showing the renewal of a program file which must be carried out before the new renewal of a 
micro program when it judges with there being the micro program and compatibility to which the 
new micro program version is working are compared, and when all the bits that stand on a 
premise bit map stand on FC hysteresis bit map, renewal of a micro program is attained. 
[0023] Since FC hysteresis will also be updated if a micro program is updated, the contents bit 
map of exchange and file updating (FC) hysteresis bit map only showing these contents of 
modification are merged, the new bit map showing the newest FC hysteresis is created, and it 
overwrites to FC hysteresis bit map field of a processor. 
[0024] 

[Effect of the Invention] Only one processor was blockaded among two or more processors, and 
exchange of the micro program in on-line operation was attained with the minimum resource, 
without interrupting the processing from the host CPU and an external magnetic disk drive for 
updating a control micro program. 

[0025] Since the micro program of two generations of old and new is managed when it is 
necessary to return to the micro program before updating the micro program after updating, the 
return activity to an earlier version can be immediately performed also in on-line operation. 
[0026] In order to judge version information before an update process, a customer engineer does 
not need to perform a version comparison. Inclusion of the inaccurate version by human mistake 
is lost. 



[Translation done.] 



4 



